0001-shim-replace-the-debian-cert-file-with-ours.patch